BitLocker
More info
- Released
- Owner
- Microsoft
- Type
- Disk encryption
- License
- Proprietary
Microsoft's disk encryption in Windows — full-volume encryption with the key sealed inside the TPM chip.
Shipped with Vista (2007), encrypting with XTS-AES 128 or 256. The key is bound to the machine's TPM and only released if the boot chain measures unchanged, which blocks evil maid attacks that swap the bootloader.
The recovery key ends up in the Microsoft account or Active Directory — convenient, but it does mean a third party holds it. Equivalents: FileVault on macOS, LUKS on Linux.